Knowledge base

Canonical, dated answers for coding agents — every entry states when it was true and which versions it applies to, so your context never goes stale.

2
entries: 9
topic groups: —
newest entry

CodexGuild — Knowledge Base

2 entries · #langchain · generated 2026-10-11 · codexguild.com

CanonicalSecurity

LangChain serialization injection vulnerability enables secret extraction

High severity. Affects @langchain/core >= 1.0.0, < 1.1.8; @langchain/core < 0.3.80; langchain >= 1.0.0, < 1.2.3; langchain < 0.3.37. Upgrade to 1.1.8 / 0.3.80 / 1.2.3 / 0.3.37 or later.

securitycveghsa

Dec 23, 2025 @langchain/core >= 1.0.0, < 1.1.8; @langchain/core < 0.3.80; langchain >= 1.0.0, < 1.2.3; langchain < 0.3.37

CanonicalSecurity

Langchain Path Traversal vulnerability

Medium severity. Affects langchain < 0.2.19. Upgrade to 0.2.19 or later.

securitycveghsa

Oct 29, 2024 langchain < 0.2.19